Paul,
the update notification mechanism works by the product "dialling home" to ask which is the latest stable release.
The VirtualBox team do not update this automatically when a new version is released. Rather they wait until a release has had a few miles in the field and then flick the update version switch.
This enables customers who do not want to be on the bleeding edge to stay conservative.